General

  • Target

    2024-02-28_e094e925bd7da8e4703fabf5ea7e9fcf_cryptolocker

  • Size

    126KB

  • MD5

    e094e925bd7da8e4703fabf5ea7e9fcf

  • SHA1

    36119eabdb0b84f72814d587e2376636a2b986f3

  • SHA256

    095184643556542f169cf7a1cc2a37fb2169104e1342eb39ce262c622d00df32

  • SHA512

    00137e8526027f8d2edc5f55f75db0cea3b916c8b03a2b2da04bd4a1efaaa07ea8db9c4d00ffa1fbd3be335bb6047019a3f91787f9109a87a12ea07806deface

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1e0G:AnBdOOtEvwDpj6z5

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-28_e094e925bd7da8e4703fabf5ea7e9fcf_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections